Add SGU credential provider and authentication broker

2026-08-31 17:48:18 -06:00
parent 5e216f42a4
commit 1f43f200b4
50 changed files with 3226 additions and 236 deletions
@@ -0,0 +1,31 @@
+[CmdletBinding()]
+param(
+    [string]$ZoneName = 'lci.lasalle.mx',
+    [string]$RecordName = 'sgu-auth',
+    [ipaddress]$IPv4Address = '192.168.50.10',
+
+    [ipaddress[]]$ExternalForwarders = @()
+)
+
+$ErrorActionPreference = 'Stop'
+$existing = Get-DnsServerResourceRecord -ZoneName $ZoneName -Name $RecordName -RRType A -ErrorAction SilentlyContinue
+if ($existing) {
+    $current = @($existing.RecordData.IPv4Address.IPAddressToString)
+    if ($current -notcontains $IPv4Address.IPAddressToString) {
+        throw "$RecordName.$ZoneName already exists with a different address: $($current -join ', ')."
+    }
+}
+else {
+    Add-DnsServerResourceRecordA -ZoneName $ZoneName -Name $RecordName -IPv4Address $IPv4Address
+}
+
+if ($ExternalForwarders.Count -gt 0) {
+    Set-DnsServerForwarder -IPAddress $ExternalForwarders -UseRootHint $false
+    Clear-DnsServerCache -Force
+    Clear-DnsClientCache
+}
+
+[pscustomobject]@{
+    BrokerRecord = Resolve-DnsName "$RecordName.$ZoneName" | Select-Object Name, Type, IPAddress
+    ExternalForwarders = @(Get-DnsServerForwarder | Select-Object -ExpandProperty IPAddress | ForEach-Object IPAddressToString)
+}